Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369974A/868528A05B2811F1A26309C6CE1D38B0/PCXkJOPJhYipFBlXFR_RmLjiMBo.mft
File:                     PCXkJOPJhYipFBlXFR_RmLjiMBo.mft (raw, json)
Hash identifier:          iZ1PnMii1zIub9Rqqw68kB/GfZE6GDAxaGmbF6HW+KI=
Subject key identifier:   09:9D:F1:46:13:EE:40:B4:6E:74:4A:B2:EE:AA:62:28:4B:EA:25:8C
Authority key identifier: 3C:25:E4:24:E3:C9:85:88:A9:14:19:57:15:1F:D1:98:B8:E2:30:1A
Certificate issuer:       /CN=F369974AAF/serialNumber=3C25E424E3C98588A9141957151FD198B8E2301A
Certificate serial:       B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PCXkJOPJhYipFBlXFR_RmLjiMBo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369974A/868528A05B2811F1A26309C6CE1D38B0/PCXkJOPJhYipFBlXFR_RmLjiMBo.mft
Manifest number:          B0
Signing time:             Sat 14 Nov 2026 05:38:01 +0000
Manifest this update:     Sat 14 Nov 2026 05:38:00 +0000
Manifest next update:     Mon 16 Nov 2026 05:38:00 +0000
Files and hashes:         1: PCXkJOPJhYipFBlXFR_RmLjiMBo.crl (hash: 5Kwf4aN5LBX0kzcKlvGbIdbVNS4uXhDCl4mnfPFKeio=)
                          2: 91B9A1AE5B3911F1BC67CFA9CE1D38B0.roa (hash: NE0BNN+6YauOQh4d8YGr79gCcioMJe/c9Md1hyxaS7k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369974A/868528A05B2811F1A26309C6CE1D38B0/PCXkJOPJhYipFBlXFR_RmLjiMBo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369974A/868528A05B2811F1A26309C6CE1D38B0/PCXkJOPJhYipFBlXFR_RmLjiMBo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PCXkJOPJhYipFBlXFR_RmLjiMBo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369974AAF, serialNumber=3C25E424E3C98588A9141957151FD198B8E2301A
        Validity
            Not Before: Nov 14 05:38:00 2026 GMT
            Not After : Nov 16 05:38:00 2026 GMT
        Subject: CN=6af7f3b9-25bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:b7:d5:36:5c:be:5e:ea:64:1c:56:a3:7e:
                    40:fb:00:e7:98:2b:fe:52:c6:9c:11:0c:72:9c:f2:
                    66:bc:7c:40:03:5f:ea:a9:8e:d9:e1:8f:72:21:a3:
                    bb:ee:57:e5:b1:c7:83:ac:93:4e:2c:6d:4e:a6:7a:
                    6d:65:b1:7c:b3:15:75:d5:ee:05:c3:f1:3d:e8:da:
                    c2:b1:04:24:fb:4c:03:8f:cf:a2:ff:4a:43:96:34:
                    bd:c3:1a:b1:10:bf:de:fc:b4:a5:47:b0:0d:f5:91:
                    d9:61:d3:4c:ce:75:ac:43:09:c0:ff:02:ea:50:d8:
                    fc:61:e1:ee:2a:72:24:58:90:4c:9b:77:0e:63:86:
                    ca:d0:b3:2c:c0:0c:82:c0:a8:81:57:94:ac:26:a9:
                    d8:0a:29:24:10:2c:0c:3f:f1:9e:89:a8:e7:86:93:
                    cd:f3:8e:34:b7:59:59:12:6e:4d:bb:ed:db:3f:b5:
                    13:61:cb:3b:ee:fa:fa:4c:27:93:78:9d:80:48:b3:
                    62:6a:37:b5:ad:79:85:36:d9:f6:c7:21:f0:61:1e:
                    bb:b9:8c:6c:c6:d1:4b:c9:4a:82:73:08:c0:ca:89:
                    5f:3d:ec:be:70:c7:56:20:9f:13:46:68:27:cd:6a:
                    63:1a:41:d1:7c:bc:f2:15:32:37:24:20:d1:da:7b:
                    d1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9D:F1:46:13:EE:40:B4:6E:74:4A:B2:EE:AA:62:28:4B:EA:25:8C
            X509v3 Authority Key Identifier:
                keyid:3C:25:E4:24:E3:C9:85:88:A9:14:19:57:15:1F:D1:98:B8:E2:30:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369974A/868528A05B2811F1A26309C6CE1D38B0/PCXkJOPJhYipFBlXFR_RmLjiMBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PCXkJOPJhYipFBlXFR_RmLjiMBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369974A/868528A05B2811F1A26309C6CE1D38B0/PCXkJOPJhYipFBlXFR_RmLjiMBo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:04:4d:5f:73:bb:54:d9:93:63:d8:e0:78:78:a5:ba:d4:3d:
         f8:97:d2:33:96:83:68:c7:ee:70:00:17:d5:cf:c3:6d:37:8a:
         a8:08:ba:06:34:f6:5d:eb:99:86:2a:6d:28:7e:1a:5c:c3:30:
         34:9b:52:78:69:3d:f8:de:22:b6:6d:05:fd:37:e4:d4:68:40:
         5e:a7:12:0c:a9:59:1e:85:44:08:5d:94:2c:eb:7b:a4:c2:7e:
         09:fb:61:92:1b:de:c8:da:53:bd:2a:d3:e1:a6:7e:a5:cd:c8:
         a2:03:bf:14:44:90:18:89:be:f3:26:77:f1:c7:35:17:83:a5:
         a3:ea:11:ec:a4:82:da:3e:9a:24:1f:b6:51:2a:50:c6:73:7c:
         51:e2:de:78:0c:4e:8e:e8:7a:ce:78:be:e4:a9:62:db:36:0e:
         33:7f:9f:48:66:a5:78:9c:e6:f4:27:dd:c9:fe:d8:05:3f:06:
         5b:ce:c9:a5:4c:f5:11:c4:24:b5:39:15:82:fd:5e:04:a0:b9:
         c9:8a:a2:00:35:af:e8:40:d9:f0:b0:3b:a8:80:21:ff:cf:80:
         df:25:b1:41:10:c9:4f:f1:72:e1:44:bc:2e:38:d9:d5:c1:ae:
         a1:d5:d7:62:d9:81:f0:34:1a:af:6c:0e:7b:6b:46:c6:5e:8d:
         4c:50:48:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----